<HTML>
 <HEAD>
 <TITLE>Tool 15: Display content of a record</TITLE>
 </HEAD>
 <BODY BGCOLOR="#FFFFFF">
  <CENTER>   <H3>Tool 15: Display content of a record</H3>
  </CENTER>

  <P><H3>Description:</H3>
   <PRE>
  A record is a capture file. It contains several packets captured
  during a sniff. It can also be created by hand. There are 7 formats
  for records: pcap (tcpdump compatible), bin (binary, unreadable by
  humans but fast) and mixed/mixed_wrap/dump/hexa/hexa_wrap (easy to
  read and edit). A record also has an associated DLT (Data Link Type),
  indicating at which level a packet start: raw (start at IP header) and
  ether (start at Ethernet header) are the 2 most common DLT. Tool 13
  displays DLT of each device.
  
  This tool reads packets stored in a record (capture file), and
  displays them.
  
  Parameter --file indicates the record filename.
  Parameter --dlt defines the DLT of packets in record (it depends on
  how it was sniffed, generally 'ether' (for Ethernet) or 'raw' (if
  packet starts at IP header)). Full list is available through netwag or
  running tool 12.
  Parameter --hdrencode and --dataencode defines how to display header
  and data/payload. Common useful values are: array, dump, synth,
  nothing, text. Full list is available through netwag or running tool
  12.
  Parameter --extended indicates to try to decode other protocols such
  as DNS or DHCP.
   </PRE>

  <P><H3>Synonyms:</H3>
  &nbsp;&nbsp;capture, frame, show<BR>

  <P><H3>Usage:</H3>
  &nbsp;&nbsp;netwox 15 -f file [-t dlt] [-H encode] [-D encode] [-x|+x]<BR>

  <P><H3>Parameters:</H3>
<TABLE BORDER=1 CELLPADDING=4>
 <TR>
  <TD ALIGN=middle><I>parameter</I></TD>
  <TD ALIGN=middle><I>description</I></TD>
  <TD ALIGN=middle><I>example</I></TD>
 </TR>
 <TR><TD><TT>-f|--file file</TD>
<TD>read from record file</TD>
<TD>srcfile.txt</TD></TR>
<TR><TD><TT>-t|--dlt dlt</TD>
<TD>dlt type of data stored in record</TD>
<TD>ether</TD></TR>
<TR><TD><TT>-H|--hdrencode encode</TD>
<TD>header encoding type</TD>
<TD>array</TD></TR>
<TR><TD><TT>-D|--dataencode encode</TD>
<TD>data encoding type</TD>
<TD>dump</TD></TR>
<TR><TD><TT>-x|--extended|+x|--no-extended</TD>
<TD>display other protocols</TD>
<TD><I>This boolean is set.<BR>Use + or --no- to unset it.</I> </TD></TR>
</TABLE>

  <P><H3>Examples:</H3>
  &nbsp;&nbsp;netwox 15 -f "srcfile.txt"<BR>
<BR>
  &nbsp;&nbsp;netwox 15 --file "srcfile.txt"<BR>
<BR>
 </BODY>
 </HTML>
